Skip to main content
  • Edit my account
  • Manage Cookies

Jakarta Authentication 3.0

Jakarta Authentication defines a general low-level SPI for authentication mechanisms, which are controllers that interact with a caller and a container’s environment to obtain the caller’s credentials, validate these, and pass an authenticated identity (such as name and groups) to the container.

Jakarta Authentication consists of several profiles, with each profile telling how a specific container (such as Jakarta Servlet) can integrate with- and adapt to this SPI.

This release contains the following changes:

  • Issue #87: Add generics to the API
  • Issue #128: Add methods for adding and removing a single server auth module
  • Issue #5: Add key for isAuthenticationRequest to server container profile.
  • Issue #130: Add default methods to ServerAuth and ClientAuth
  • Issue #132: Add constructor variants taking a cause to AuthException
  • Issue #134: Clarify interaction of Servlet profile with some other specs
  • Issue #136: Clarify PasswordValidationCallback
  • Issue #119: Clarified state expectations of callbackhander for per-request state
  • Issue #138: Deprecate SecurityManager usage in light of JDK 17/JEP 411

This release requires Java SE 11 or newer (aligned with Jakarta EE 10).

Compatible Implementations

Ballots

Release Review

The Specification Committee Ballot concluded successfully on 2022-05-16 with the following results.

Representative Representative for: Vote
Kenji Kazumura Fujitsu +1
Tom Watson, Emily Jiang IBM +1
Ed Bratt, Dmitry Kornilov Oracle +1
Andrew Pielage, Petr Aubrecht Payara +1
David Blevins, Jean-Louis Monteiro Tomitribe no vote
Ivar Grimstad EE4J PMC +1
Marcelo Ancelmo, Martijn Verburg Participant Members +1
Werner Keil Committer Members +1
Jun Qian Enterprise Members +1
Zhai Luchao Enterprise Members +1
Total 9

The ballot was run in the jakarta.ee-spec mailing list.

Plan Review

The Specification Committee Ballot concluded successfully on 2021-06-15 with the following results.

Representative Representative for: Vote
Kenji Kazumura Fujitsu +1
Dan Bandera, Kevin Sutter IBM +1
Ed Bratt, Dmitry Kornilov Oracle +1
Andrew Pielage, Matt Gill Payara +1
Scott Stark, Mark Little Red Hat +1
David Blevins, Jean-Louis Monteiro Tomitribe +1
Ivar Grimstad EE4J PMC +1
Marcelo Ancelmo, Martijn Verburg Participant Members +1
Werner Keil Committer Members +1
Dr. Jun Qian Enterprise Members +1
Total 10

The ballot was run in the jakarta.ee-spec mailing list.

Click on the specifications below to access the specification document, Javadoc, Technology Compatibility Kit (TCK), and compatible implementation for each release of the specification.

Platform and Profile Specifications

The Jakarta EE Platform and Profile specifications are the umbrella specifications for the individual specifications. The Jakarta EE Platform includes most of the individual specifications, while the Profile specifications include the individual specifications for developing web platforms and microservices architectures.

Individual Specifications

Each individual specification describes a standardized way of implementing a particular aspect of an enterprise Java application.

Back to the top